Announcement

Collapse
No announcement yet.

What kind of web address is this???

Collapse
X
  • Filter
  • Time
  • Show
Clear All
new posts

  • What kind of web address is this???

    http://<some number>/signin.ebay.com.ebayasap.dll.html

    It actually points to:

    http://<Some sitename>/signin.ebay.c...yasap.dll.html

    Which is the web site of an Accounting firm here in Melbourne. How does the top address work??

    I've rung the company in question and advised them to shutdown their web site to investigate the hacking.


    Dumber: Removed urls.
    Last edited by Dumber; 19th April 2007, 21:29.
    |
    +-- JDMils
    |
    +-- Regional Systems Engineer, DotNet programmer & Jack of all trades
    |

  • #2
    Re: What kind of web address is this???

    7.47pm our time and it is still up and running. They obviously aren't in a hurry to stop the intrusion.

    Had one 2 weeks ago that was using the mail server (running Linux) of a fabric business in Fitzroy.
    1 1 was a racehorse.
    2 2 was 1 2.
    1 1 1 1 race 1 day,
    2 2 1 1 2

    Comment


    • #3
      Re: What kind of web address is this???

      It now gets reported as a phishing site when I browse to it using IE7. It is in fact http://<some number>/signin.ebay.com.ebayasap.dll.html and the part that says "signin.ebay.com.ebayasap.dll.html" is irrelevant, that's just the name of the HTML page that you would see if you visited the site http://<some number> and then browsed to that page.

      So by putting a numerical value for the site, and a long "ebay" type page name, they're trying to fool people (phishing).

      What I can't explain yet is how they get http://<some number> to translate into http://<some number> so I'm trying to work out how that happens. Interesting.

      Edit: Some more numbers edited.
      Last edited by Dumber; 19th April 2007, 21:41.
      Best wishes,
      PaulH.
      MCP:Server 2003; MCITP:Server 2008; MCTS: SBS2008

      Comment


      • #4
        Re: What kind of web address is this???

        PaulH- that number is the decimal equivalent of the dotted IP. All those IP's actually represent decimal numbers, and vice vera. You can convert your IP here. Or enter any IP on this page (scroll down, in the middle).

        If there is a mod around I would remove those links or invalidate them....
        "...if I turn out to be particularly clear, you've probably misunderstood what I've said” - Alan Greenspan

        Comment


        • #5
          Re: What kind of web address is this???

          Agree, Urls edited.
          Marcel
          Technical Consultant
          Netherlands
          http://www.phetios.com
          http://blog.nessus.nl

          MCITP(EA, SA), MCSA/E 2003:Security, CCNA, SNAF, DCUCI, CCSA/E/E+ (R60), VCP4/5, NCDA, NCIE - SAN, NCIE - BR, EMCPE
          "No matter how secure, there is always the human factor."

          "Enjoy life today, tomorrow may never come."
          "If you're going through hell, keep going. ~Winston Churchill"

          Comment


          • #6
            Re: What kind of web address is this???

            To expand on Lior's reply; an IP address is actually a single 32 bit number. We break it down into four 8 bit chunks to make it easier to read and remember - but computers don't. To convert the address to the 32 bit number, you have to convert each decimal number to binary or hex, remove the dots, and then convert the whole thing back to decimal...

            For instance 255.254.127.192 becomes FF.FE.7F.C0 in hex, and

            1111 1111 . 1111 1110 . 0111 1111 . 1100 0000 in binary.

            Take out the dots and convert it to decimal and you get 4,294,868,928.


            Tom
            For my own and your protection, I do not provide support by private message under any circumstances. All such messages will be deleted and ignored.

            Anything you say will be misquoted and used against you

            Comment


            • #7
              Re: What kind of web address is this???

              Very interesting. Thanks for the IP conversion explanation!
              |
              +-- JDMils
              |
              +-- Regional Systems Engineer, DotNet programmer & Jack of all trades
              |

              Comment


              • #8
                Re: What kind of web address is this???

                I sent the person an email last night telling him his web server had been compromised. He phoned me at 2pm (Melb time) and asked me what it was all about. Finally convinced him to contact his IT support. Turns out he had been receiving warning emails about the eBay hoax for the last week and a half. Will not be taking my tax return to him.
                1 1 was a racehorse.
                2 2 was 1 2.
                1 1 1 1 race 1 day,
                2 2 1 1 2

                Comment


                • #9
                  Re: What kind of web address is this???

                  It's ppl like this guy who don't understand the severity of the problem! I rang and spoke to him when I posted my first post to this thread, I told him that his web server had been hijacked and sent him an email with the information I had so that he could check it. The next day I checked and found the server still running so I emailed him again! Not one reply back not even to thank me for the help. G.
                  |
                  +-- JDMils
                  |
                  +-- Regional Systems Engineer, DotNet programmer & Jack of all trades
                  |

                  Comment

                  Working...
                  X